MaaS360 Cloud Extender - ForeScout · Lotus Traveler Manager in the Cloud Extender Configuration Tool ... MaaS360 Cloud Extender Configuration Tool will be launched and will take

MaaS360 > Cloud Extender Installation Guide

MaaS360 Cloud Extender Installation Guide

2


Copyright © 2012 Fiberlink Communications Corporation. All rights reserved.

Information in this document is subject to change without notice. The software described in this document is furnished under a license agreement or nondisclosure agreement. The software may be used or copied only in accordance with the terms of those agreements. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or any means electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of Fiberlink Communications Corporation.

All brands and their products are trademarks or registered trademarks of their respective holders and should be noted as such.

Fiberlink Communications Corporation

1787 Sentry Parkway West

Blue Bell, PA 19422

February 2012

Revision 4

002

3


Table of Contents

Introduction .................................................................................................................. 4 General Requirements .................................................................................................. 4 System Requirements for the Cloud Extender for Microsoft Exchange ActiveSync Module (MaaS360 for Mobile Devices) ......................................................................................... 5 System Requirements for the Cloud Extender for User Authentication and User Visibility Modules (MaaS360 for Mobile Devices) ......................................................................................... 5 System Requirements for the Cloud Extender for IBM Lotus Traveler Module (MaaS360 for Mobile Devices) .......................................................................................................... 6 System Requirements for the Cloud Extender for BlackBerry Enterprise Server Module (MaaS360 for Mobile Devices) ......................................................................................... 7

Installing and Configuring the Cloud Extender ......................................................................... 9 Visibility Service ......................................................................................................... 9 MaaS360 Cloud Extender Configuration Tool ....................................................................... 12

Appendix A: Other Modules ................................................................................................ 23 Lotus Traveler Manager in the Cloud Extender Configuration Tool ............................................. 23 BlackBerry Enterprise Server integration in the Cloud Extender Configuration Tool ........................ 24 Office 365 Integration in the Cloud Extender Configuration Tool ............................................... 25

4


Introduction The MaaS360 Cloud Extender can be downloaded from the customer area in the MaaS360 portal. The Cloud Extender is an executable, and once installed will automatically launch the MaaS360 Cloud Extender Configuration Tool. This tool can also be executed manually by an administrator after installation by using the shortcut All Programs/MaaS360/MaaS360 ActiveSync Configuration Utility.

GENERAL REQUIREMENTS

Before beginning the installation, make sure the following requirements are met:

Item Meets Requirement

Recommended: Windows Server 2008 R2 (64-bit)

Supported: Windows 7, Windows Server 2003 R2

2 GB Memory Dual Core

Note: The Cloud Extender can be installed directly on the Exchange Server or Active Directory Server, but this is not recommended.

Access to the following URLs from the Cloud Extender machine. (You should receive either the message “1234567890” or a blank page when the URL is referenced from a browser.)

https://mpns.maas360.com

208.76.128.168

https://services.fiberlink.com

208.76.128.153

208.76.132.59

208.76.130.187

http://internettest.fiberlink.com

208.76.128.58

208.76.132.21

http://upload.fiberlink.com

72.21.0.0/16

https://mpns.maas360.com/

https://services.fiberlink.com/

http://internettest.fiberlink.com/

http://upload.fiberlink.com/

5


SYSTEM REQUIREMENTS FOR THE CLOUD EXTENDER FOR MICROSOFT EXCHANGE ACTIVESYNC MODULE (MAAS360 FOR MOBILE DEVICES)

The MaaS360 Cloud Extender is a small program that runs as a service on a Microsoft Windows machine in your network. The Cloud Extender creates an outbound connection over HTTPS to the MaaS360 portal that is used as a bi-directional communication facility and allows the MaaS360 portal to integrate with your Exchange Server. It performs the following functions:

• Uses Microsoft PowerShell commands to query the Exchange Server for vital information related to the ActiveSync enabled devices on the Exchange Server.

• Processes device and policy information and transmits it to the MaaS360 portal for reporting and management functions.

• Receives information from the MaaS360 portal including:

o ActiveSync policies

o Device visibility

o Device actions

o Policy assignments

• Uses Microsoft PowerShell commands to execute policy assignments and actions.

The MaaS360 Cloud Extender requires that it be configured with an account with sufficient rights to run as a service and to access Exchange Servers.


Exchange Server 2007 or 2010; Office 365

Domain User and Exchange Organization Administrator (2007) or Organization Management (2010) Access Rights

Local Admin access is required on the machine the Cloud Extender is installed on.

Exchange Management tools installed on the Cloud Extender machine. (The tools must match both the year and service pack of the Exchange Server, not required for Office 365 or Remote PowerShell options).

Windows PowerShell Version 2

SYSTEM REQUIREMENTS FOR THE CLOUD EXTENDER FOR USER AUTHENTICATION AND USER VISIBILITY MODULES (MAAS360 FOR MOBILE DEVICES)

MaaS360 Active Directory integration provides customers with the ability to leverage their existing corporate directory information as they manage devices. Administrators can choose to use Active Directory to authenticate

6


enrollment requests and to place users into logical groupings to streamline the application of policies, actions and rules.

The MaaS360 Active Directory integration capability is an optional component that can be configured to provide the following:

• Device Authentication

• Access Group information

The MaaS360 Cloud-Extender for Active Directory integrates with your Active Directory Server to provide the necessary interaction.



Domain User Access Rights

Local Admin access is required on the machine the Cloud Extender is installed on.

Windows PowerShell Version 2

SYSTEM REQUIREMENTS FOR THE CLOUD EXTENDER FOR IBM LOTUS TRAVELER MODULE (MAAS360 FOR MOBILE DEVICES)

The MaaS360 Cloud Extender is a small program that runs as a service on a Microsoft Windows machine in your network. The Cloud Extender creates an outbound connection over HTTPS to the MaaS360 portal that is used as a bi-directional communication facility and allows the MaaS360 portal to integrate with your Lotus Traveler Server. It performs the following functions:



o Device visibility

o Device actions

The MaaS360 Cloud Extender requires that it be configured with an account with sufficient rights to run as a service and to access Traveler Servers.



Lotus Domino 8.5.2 or greater

Lotus Traveler 8.5.2 or greater

The Cloud Extender must be installed on a machine that has the Notes client installed.

7


A Domino account and credentials with sufficient rights to perform Domino/Traveler Admin functions. You should have at least access level of Server Remote Admin, Manager w/ delete access to Traveler.nsf.

.NET 3.5 or higher

SYSTEM REQUIREMENTS FOR THE CLOUD EXTENDER FOR BLACKBERRY ENTERPRISE SERVER MODULE (MAAS360 FOR MOBILE DEVICES)

The MaaS360 Cloud Extender is a small program that runs as a service on a Microsoft Windows machine in your network. The Cloud Extender creates an outbound connection over HTTPS to the MaaS360 portal that is used as a bi-directional communication facility and allows the MaaS360 portal to integrate with your BlackBerry Enterprise Server. It performs the following functions:



o Device visibility

o Device actions

o Policy assignments

o Device Activation

• Uses BlackBerry Administration Service and APIs commands to execute policy assignments and actions

• Performs Device Activation using BES APIs

The MaaS360 Cloud Extender requires that it be configured with a BlackBerry Administrator Account with sufficient rights to run as a service and to access run the Administrator APIs.



BlackBerry Enterprise Server, for Microsoft Exchange or Lotus Notes, version 5.0 and above

8



BlackBerry Administrator Account with the following details:

• Supported Authentication Types

o Exchange: Active Directory, BlackBerry Administration Account (Local Account)

o Domino: BlackBerry Administration Account (Local Account)

• Administrator Account should have the following access rights:

o Following pre-defined BES Roles can be used:

Security Manager

The Service Account under with Cloud Extender will operate should have https access to the APIs.

BlackBerry Administrator APIs installed on the server that hosts the BlackBerry Administrative Console (BES 5.0 SP1 and above preinstalls these automatically).

.NET 3.5 or higher.

9


Installing and Configuring the Cloud Extender Launch the MaaS360 Cloud Extender installation package. This package can be downloaded using the Product Download link on the MaaS360 Portal. You will also need the License Key for installation. Click the Send License Key workflow on the left to have it sent to your email address.

As noted in the Introduction of this document, what is being installed is a version of the MaaS360 Visibility Service, which provides the underlying functionality for the Cloud Extender. Once the Visibility Service is installed, the MaaS360 Cloud Extender Configuration Tool will be launched and will take you through the steps required to configure the Cloud Extender for your environment.

*The Configuration Tool can also be run later by the administrator manually using the shortcut to All Programs/MaaS360/MaaS360 ActiveSync Configuration Utility.

VISIBILITY SERVICE

The following screens are representative of what you will see as you step through the Visibility Service installation.

1. Double click the MaaS360 Cloud Extender executable.

10


2. Click Next to advance to the License Key screen.

3. Enter the License Key provided to you in the Welcome Email.

11


4. Click Next to advance to the Ready to Install the Program screen.

5. Click Install to continue the installation.

12


6. Click Next to continue the installation.

7. When prompted, click Finish. The MaaS360 Cloud Extender Configuration Tool will now launch.

MAAS360 CLOUD EXTENDER CONFIGURATION TOOL

Once the Configuration Tool launches, during installation you will be taken through the following screens:

1. You will be prompted to select the mode of Internet Access. MaaS360 will try to auto-populate the detail found within the IE settings.

a. If you are manually configuring your proxy settings, you also have the ability to set credentials if you are using an authenticated proxy.

b. If no proxy is required to reach the Internet, use the Do not use any proxy option.

13


c. When Internet access is configured successfully a Green checkmark will appear on the Check for Internet connectivity screen as seen below.

14


2. Click Next to continue to select your services.

3. The following services are available:

a. Exchange ActiveSync Manager

b. Lotus Traveler Manager

c. BlackBerry Enterprise Server Integration

d. User Authentication (LDAP or Active Directory)

e. User Visibility (LDAP or Active Directory)

f. Certificates Integration (call Fiberlink for additional configuration options)

15


4. Select your services. Below is a common configuration for Exchange Active Sync, User Authentication and User Visibility.

NOTE: If you are using LDAP, please call Fiberlink for additional configuration options.

16


5. Click Next to verify the prerequisites were met.

NOTE: This screen could vary based on your selections.

17


6. Click Next to configure the service account used to run the MaaS360 Visibility Service.

18


7. Click Next to validate the permissions and password.

NOTE: You will be notified if there are any errors and why there was an error. Be sure the account has the permissions as defined in the checklists above for the proper services.

19


8. Click Next to continue to the Reachability Test. Running the Reachability Test is optional.

20


9. Click Test Reachability to test access to the services selected. If you do not want to run this test, click Next to move past it. Here is an example of what the results may look like.

21


10. Click Next to configure Automatic Updates and finish the configuration.

NOTE: It is recommended that Automatic Update remain enabled so the latest modules are downloaded for the installation. After you have all the proper modules, the automatic updates can be disabled. If the Automatic Updates checkbox is greyed out, that means the modules are still being downloaded.

11. Click Finish.

22


After a few minutes data will be collected and passed to MaaS360. You can check this process by logging into MaaS360 via portal.fiberlink.com and going to the Manage -> Manage MaaS360 Cloud Extenders workflow. The Summary dropdown will show statistics about the communication and number of devices that are available.

23


Appendix A: Other Modules

LOTUS TRAVELER MANAGER IN THE CLOUD EXTENDER CONFIGURATION TOOL

1. Click the + button to add the names of your Traveler server(s)

2. Browse to the Notes.ini File Path

3. Browse to the Notes ID file

4. Enter the password for the Notes ID file being used for the MaaS360 Visibility Service

24


BLACKBERRY ENTERPRISE SERVER INTEGRATION IN THE CLOUD EXTENDER CONFIGURATION TOOL

1. Enter your BAS Server Name

2. Select your Mailbox Server and click Get Authentication Types

3. Enter the detail for the Service Account being used by the MaaS360 Visibility Service

25


OFFICE 365 INTEGRATION IN THE CLOUD EXTENDER CONFIGURATION TOOL

1. Enter the Office 365 Server URL

2. Enter the detail for the Service Account being used by the MaaS360 Visibility Service

Documents

MaaS360 Cloud Extender - ForeScout · Lotus Traveler Manager in the Cloud Extender Configuration Tool ... MaaS360 Cloud Extender Configuration Tool will be launched and will take